This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
File:                     CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json)
Hash identifier:          oNPO74je/Uya8QbVbSYN0vfVn5adcD8zimD+PguGUV4=
Subject key identifier:   AD:E1:80:D0:7E:96:64:5F:15:41:24:B2:89:25:34:3A:6B:6E:4A:44
Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
Certificate issuer:       /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Certificate serial:       1C2F47565EE16254247F582CD0E5C60097095E99
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
Manifest number:          C1
Signing time:             Mon 17 Nov 2025 05:55:08 +0000
Manifest this update:     Mon 17 Nov 2025 05:50:08 +0000
Manifest next update:     Tue 18 Nov 2025 06:02:08 +0000
Files and hashes:         1: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=)
                          2: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=)
                          3: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=)
                          4: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=)
                          5: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=)
                          6: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=)
                          7: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=)
                          8: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=)
                          9: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: MmD2VqVLvp/weynlY8lkeI3A2ttWOsTfM0NcqoWCubs=)
                          10: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=)
                          11: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=)
                          12: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=)
                          13: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=)
                          14: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=)
                          15: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=)
                          16: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=)
                          17: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2f:47:56:5e:e1:62:54:24:7f:58:2c:d0:e5:c6:00:97:09:5e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
        Validity
            Not Before: Nov 17 05:50:08 2025 GMT
            Not After : Nov 18 06:02:08 2025 GMT
        Subject: CN=ADE180D07E96645F154124B28925343A6B6E4A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:10:1f:14:e1:f9:64:eb:f3:d1:e2:b1:11:44:
                    de:a9:41:67:86:f4:4e:26:fb:0b:77:76:ab:21:0a:
                    b7:ce:ba:3d:b4:22:6e:c4:88:f7:6c:7c:d9:8b:33:
                    cd:25:c1:8e:96:fa:59:36:00:d7:78:21:3e:b3:40:
                    54:0e:9a:d5:9d:f1:78:74:3b:04:3c:4c:f5:5e:c5:
                    af:64:a8:4d:44:ce:9a:ff:4b:ec:0f:1e:b3:7a:bf:
                    00:46:67:fd:26:7e:aa:d4:4e:57:d5:f7:66:8f:e7:
                    aa:75:e7:b2:15:45:ac:db:4b:11:db:5f:28:c1:5f:
                    a6:39:8a:32:0b:bd:ef:03:f1:f4:d9:73:b6:53:3a:
                    bb:80:56:1d:4a:86:44:c8:3c:5e:28:f3:96:13:18:
                    47:fa:95:9f:a7:dd:9d:96:62:ed:9e:61:ab:15:dc:
                    cb:14:b1:bd:8a:19:32:3b:8b:ef:b0:80:41:05:c8:
                    84:c2:9f:ca:50:ab:20:57:46:9e:bf:10:14:5c:48:
                    30:16:8b:66:74:9d:dd:8d:47:c1:3b:99:e8:c2:48:
                    6c:1d:b1:fd:bd:5d:ac:9d:00:48:64:e5:e0:5e:27:
                    a1:57:12:a9:c4:75:4c:ed:53:99:e3:aa:67:f4:d9:
                    16:77:c9:b8:ed:d2:de:9c:90:df:92:17:34:36:4f:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E1:80:D0:7E:96:64:5F:15:41:24:B2:89:25:34:3A:6B:6E:4A:44
            X509v3 Authority Key Identifier:
                keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4e:85:30:6b:71:66:ca:05:07:23:02:4a:f5:51:ee:e6:e5:
         3a:46:29:25:73:af:90:9a:90:6b:6c:ae:73:9c:aa:fd:8a:51:
         3c:7a:ea:17:3e:fa:39:64:65:70:3e:8f:e5:68:29:a9:39:a8:
         ac:b5:6f:7c:a9:c8:35:10:1a:7e:a8:b5:e9:19:cc:de:05:25:
         7e:12:31:25:df:87:3b:00:46:e1:4a:fa:5b:15:d6:78:9e:63:
         13:49:bd:3c:c9:17:0d:c2:d2:72:9d:fb:71:bb:96:cd:e9:ce:
         da:9b:5e:20:e7:b9:b3:75:e1:f5:07:77:02:fd:d2:13:4e:70:
         0c:d2:d9:d2:d4:c0:2c:12:81:c8:99:b6:ef:91:01:df:42:ef:
         77:b7:70:3b:43:89:b1:e4:61:db:45:c2:24:31:56:de:0c:40:
         f4:d9:81:db:de:25:2c:45:b4:0b:ee:96:7a:47:b5:68:d4:37:
         07:fb:93:99:46:75:83:28:f2:55:21:37:e0:61:72:21:74:46:
         7d:da:fa:17:94:2c:c4:e9:13:25:cc:8f:11:7d:23:9c:80:a6:
         ae:14:f6:de:6b:6d:52:ed:d2:fc:9a:0d:42:31:41:4f:0d:de:
         f9:f3:56:6a:da:c3:ff:b7:70:d5:fd:c3:8d:22:67:e4:ed:6b:
         3d:d1:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:21:01 2025 by rpki-client